Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/yhhMqOayivlP0HqWgBqkxI1f14U.roa
File: yhhMqOayivlP0HqWgBqkxI1f14U.roa (raw, json)
Hash identifier: w/NNRo63VlTAmPeepIG4fNxKMWjZVte8F0Xs65Wc7u4=
Subject key identifier: CA:18:4C:A8:E6:B2:8A:F9:4F:D0:7A:96:80:1A:A4:C4:8D:5F:D7:85
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 019470A06214D79D4A7C28C35FE29E6B2667
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/yhhMqOayivlP0HqWgBqkxI1f14U.roa
Signing time: Thu 16 Jan 2025 19:39:06 +0000
ROA not before: Thu 16 Jan 2025 19:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35107
IP address blocks: 87.247.136.0/24 maxlen: 24
87.247.137.0/24 maxlen: 24
87.247.138.0/24 maxlen: 24
87.247.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:a0:62:14:d7:9d:4a:7c:28:c3:5f:e2:9e:6b:26:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: Jan 16 19:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca184ca8e6b28af94fd07a96801aa4c48d5fd785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:a6:65:a3:f9:1a:47:8e:af:3a:e5:4f:9b:
d0:f6:47:3d:ac:9f:49:f5:b0:28:81:35:98:42:89:
e5:ab:64:50:a6:31:8c:64:cb:bb:d2:8b:52:16:25:
b5:c7:36:a9:f1:05:84:6e:2e:d0:01:11:1b:93:63:
f4:b2:d6:0d:19:ac:a3:b8:17:c7:0b:2b:55:87:78:
d9:41:e8:b2:09:e3:52:81:43:b8:90:66:85:16:fb:
bc:06:8c:42:11:04:a0:df:17:1a:14:70:47:bb:65:
3a:41:fb:5b:e1:2a:2a:e9:06:48:61:b4:b0:47:d1:
0f:8e:16:1e:32:bf:1c:c9:da:b6:7f:af:99:a7:42:
cb:c4:48:35:e0:ac:41:8c:a0:61:91:b5:9a:4e:86:
9a:ab:69:8f:05:0b:53:d3:24:10:69:22:1f:76:25:
7f:f8:a6:ed:38:1d:94:81:bd:27:c3:02:5a:04:95:
8f:fe:00:d9:31:8e:4f:82:f5:ef:10:bf:8e:2d:39:
ea:30:02:4f:26:2e:d8:c2:99:ec:f2:ec:54:63:01:
64:a6:0d:cd:7a:ec:4d:92:94:a5:95:60:18:97:59:
71:28:79:a1:fb:91:92:4c:8f:ab:38:9f:ec:9e:c5:
f9:20:b8:15:94:ea:25:1e:95:c7:39:b4:9f:20:4e:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:18:4C:A8:E6:B2:8A:F9:4F:D0:7A:96:80:1A:A4:C4:8D:5F:D7:85
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/yhhMqOayivlP0HqWgBqkxI1f14U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.136.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:d2:46:29:41:59:77:15:e6:e3:26:14:dd:ca:1d:38:72:8d:
30:40:5f:22:0c:be:fb:b1:57:d1:9a:b4:a8:b9:90:f6:5c:5f:
8a:d6:37:09:bd:de:12:c8:f6:da:68:88:d0:74:dc:f4:e5:01:
8f:76:a5:d0:4b:48:4e:60:85:3c:dc:57:a9:07:11:e0:aa:2a:
8a:d6:86:ba:a9:4a:58:4a:bb:dd:b6:1f:ff:ed:dc:ad:f8:c0:
1d:2b:f4:5c:0f:b6:f3:c5:b4:eb:ef:7e:cb:dc:70:e6:f1:d2:
f6:c1:0c:14:81:ef:67:6d:59:ca:c0:57:5c:65:70:6a:c9:3e:
55:06:8d:23:1c:9c:07:81:bf:7d:31:e6:09:46:69:b6:d7:2a:
f6:30:07:1d:85:e9:67:f3:eb:ba:d9:fd:50:a7:75:2a:7b:cd:
22:6d:50:fa:b4:a2:92:99:03:97:0c:dd:7c:f5:b7:53:8c:ec:
5d:4f:a9:92:b0:74:86:96:e8:df:8e:5b:b8:39:3b:5e:28:19:
10:30:14:54:f8:23:14:55:bd:a3:ba:af:18:64:49:36:31:5f:
10:0a:a3:0f:ad:6a:1e:96:97:35:97:9a:c6:05:35:9a:f5:e8:
1d:3c:92:b7:1e:e3:65:87:fd:10:21:bd:52:fb:ee:31:26:95:
44:fb:7f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net